Views on differrent interfaces
Willmann, Robert
Robert.Willmann at commerzbank.com
Fri Apr 23 06:23:22 UTC 2010
Hi,
To use two instances wouldn't help anything, he would need one instance with two views and a second instance. Not a big win over three views.
But there is an easy solution with only two views. What the op seemes to have missed in the docs is the following sentence:
"The order of the view statements is significant - a client request will be resolved in the context of the first view that it matches."
So the solution could be:
View 1 { match-clients ( trusted_nets; }; match-destination { interface2; }; };
View 2 { match-destination { interface1; interface2; }; };
(assuming the non-trusted_nets are any net which is not in trusted_nets)
Mit freundlichen Grüßen,
Robert Willmann
Commerzbank AG
Date: Thu, 22 Apr 2010 09:05:33 -0700
From: Doug Barton <dougb at dougbarton.us>
Subject: Re: Views on differrent interfaces
To: Tom Schmitt <TomSchmitt at gmx.de>
Cc: bind-users at isc.org
Message-ID: <4BD073CD.3030202 at dougbarton.us>
Content-Type: text/plain; charset=ISO-8859-1
On 4/22/2010 5:30 AM, Tom Schmitt wrote:
>
> Thank you for your answer.
> But this doesn't work: With match-destination and match-clients I can only define the same match-clients statement for both destionation interfaces, not differrent one.
>
> The only workaround I see how to rech my goal by only using these commands is to define a third view which has the exactly same data like the first view. Then I could use machting rules like this:
> view 1 { match-destination { interface1 }; };
> view 2 { match-clients ( trusted_nets }; match-destination { interface2 }; };
> view 3 { match-clients { non-trusted_nets }; match-destination { interface2 }; };
>
> I hoped there would be a way to do this whith only two views. Like inserting some logic: matchif( destination=interface1 OR (destination=interface2 AND client=non-trusted_nets) )
Run separate instances of BIND on the two different interfaces.
--
http://www.commerzbank.de
Vorsitzender des Aufsichtsrates: Klaus-Peter Müller
Vorstand: Martin Blessing (Vorsitzender),
Frank Annuscheit, Markus Beumer, Achim Kassow,
Michael Reuther, Stefan Schmittmann, Eric Strutz
Commerzbank Aktiengesellschaft, Frankfurt am Main
Handelsregister: Amtsgericht Frankfurt am Main, HRB 32000
USt-IdNr.: DE 114 103 514
More information about the bind-users
mailing list